Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ee9f885-526a-3b1c-beb8-b95be751a27a.roa
File:                     4ee9f885-526a-3b1c-beb8-b95be751a27a.roa (raw, json)
Hash identifier:          ps6IqXpQixvQq/E3PadSmWokwyJjZV7sdgNBZhdKBg8=
Subject key identifier:   C9:2B:86:F0:CE:20:CD:6B:DE:6A:C7:5D:9E:40:38:DA:F1:12:57:08
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0EFDB5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ee9f885-526a-3b1c-beb8-b95be751a27a.roa
Signing time:             Sat 13 Jun 2020 19:01:34 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Wed 20 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 20 04:00:00 2030 GMT
        Subject: CN=c466b2a3-43e4-484f-b29e-4ca63033ce6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:bf:2c:6f:dd:a0:89:ad:66:cc:86:89:bb:
                    e2:01:56:61:12:17:6c:33:df:9a:ca:28:07:80:b5:
                    79:78:15:d9:2a:4e:ab:c5:d6:76:24:a9:9f:d2:0b:
                    e0:6d:b6:ec:d6:aa:0d:e0:aa:83:d7:e1:60:d9:6f:
                    a5:ba:3f:5b:f6:1c:f7:29:85:0f:31:59:4a:9a:c9:
                    fd:c5:f8:6c:5b:5e:af:7d:2d:1d:d0:d9:08:8e:11:
                    88:3f:4d:35:37:39:ac:57:29:dc:94:88:fe:6c:10:
                    3f:ed:59:8a:d6:7c:16:e2:a7:4c:fc:7c:11:c4:90:
                    06:db:c1:57:bb:8a:5c:d3:41:28:ae:62:78:4d:b0:
                    d1:09:20:cf:da:89:1d:f7:1d:ec:47:ff:52:94:02:
                    fd:ac:4e:8a:d4:71:0c:3a:89:dd:32:41:6c:72:fb:
                    29:1b:76:6f:b1:72:41:4c:d0:c4:90:44:19:27:c0:
                    c8:e4:8e:eb:e6:cd:ac:d2:bc:f4:bc:2b:52:b5:20:
                    0f:f0:0f:47:a7:ed:4e:c8:95:14:99:58:81:90:13:
                    92:3e:a6:64:51:f0:bb:a3:75:70:04:47:a2:95:14:
                    fe:61:b9:a2:e8:f8:c5:97:3a:bb:05:d5:aa:44:06:
                    8f:e3:b9:41:d8:4f:b9:fb:9f:9c:3b:19:60:9d:4c:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:86:F0:CE:20:CD:6B:DE:6A:C7:5D:9E:40:38:DA:F1:12:57:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ee9f885-526a-3b1c-beb8-b95be751a27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:5e:06:8c:2f:a4:72:aa:0c:1e:5d:3e:a6:78:de:de:09:
         66:7a:9a:83:5b:df:a8:be:4d:4b:c2:6b:81:bd:05:1e:9b:5a:
         d9:aa:ec:34:aa:39:18:04:7d:0b:d1:9c:3c:e4:ea:ec:9d:d4:
         03:d2:63:ff:40:bf:16:6a:16:f9:10:64:e5:7e:7d:ae:03:fc:
         89:24:77:50:28:ac:6f:29:36:e8:81:98:0c:8c:7e:f3:23:5a:
         ff:d7:8c:91:74:d1:a1:1b:c0:ca:3d:7a:73:9d:5a:1c:99:45:
         e2:c6:5b:71:1d:46:8a:89:e2:33:59:18:e4:f4:09:15:24:f0:
         2a:e5:fb:0f:ff:4d:43:4b:b3:f0:fe:db:e8:bb:42:d2:ae:44:
         80:d4:c1:52:03:8e:5a:b5:77:ee:ea:e2:b8:cb:f8:8e:ab:9e:
         ef:79:2e:1e:7b:48:f6:36:03:0c:89:33:18:c4:37:53:6d:d2:
         8a:ee:20:8f:c1:d3:9b:6a:e0:f5:20:35:e8:7f:a3:11:86:0f:
         29:6f:91:96:72:43:ea:cd:30:da:3c:0f:2b:6a:0b:45:db:9c:
         65:a8:96:1d:04:4e:ba:68:e6:69:39:ae:69:e0:e7:33:ad:4e:
         de:4f:75:58:0a:c9:6f:95:a6:05:e4:db:42:85:6c:0d:5d:56:
         71:db:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org